$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663530303a3a2f34302d3430203d3e20323634313230.roa File: 323830343a323263303a663530303a3a2f34302d3430203d3e20323634313230.roa (raw, json) Hash identifier: hb+DfkCPxPwdEc73UF9LAuriVMh7gFge7e0+bHvrBgU= Subject key identifier: 0E:EF:AD:F3:78:9D:33:5E:82:07:51:A4:46:30:DE:A6:6D:25:BD:9C Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 2DFA2FAE08A5903EF9D7206E9319A6DE1936767C Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663530303a3a2f34302d3430203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:37:03 +0000 ROA not before: Mon 02 Mar 2026 15:32:03 +0000 ROA not after: Mon 01 Mar 2027 15:37:03 +0000 asID: 264120 IP address blocks: 2804:22c0:f500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:fa:2f:ae:08:a5:90:3e:f9:d7:20:6e:93:19:a6:de:19:36:76:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:32:03 2026 GMT Not After : Mar 1 15:37:03 2027 GMT Subject: CN=0EEFADF3789D335E820751A44630DEA66D25BD9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:4c:71:bf:a2:e9:cf:dd:cf:ca:b4:1b:03: 1f:4d:49:a3:f1:3c:99:d2:4a:83:b0:23:dc:28:da: 39:0b:bd:05:52:01:65:b1:77:db:0b:1c:20:cd:1d: 43:a4:f9:ba:19:c0:f5:6f:63:f8:4f:4e:05:af:62: eb:57:88:42:c3:e7:85:68:35:36:83:44:1c:d4:95: 26:9f:66:1d:9b:56:e1:85:c9:72:73:91:ed:7e:60: 53:c2:a2:51:04:e7:d8:1e:5b:d4:31:c0:57:88:65: c1:14:43:87:00:24:a1:b2:4f:e2:74:5a:90:75:79: 2f:83:4b:61:96:15:a0:94:93:0d:62:9d:55:c6:b9: 7b:db:7d:c3:11:93:6c:c2:cf:d3:7b:b5:1c:70:91: ce:98:01:e9:87:12:69:a9:e5:b8:00:16:69:de:6c: 25:44:a3:9c:6d:f9:72:36:5b:db:bc:c3:9e:8c:cb: 46:86:1f:f6:22:97:4b:f8:9c:ff:db:7e:e3:73:cd: 22:78:dc:04:bd:84:ca:07:92:0c:92:f4:7f:1f:42: 5c:1b:ea:ba:6b:20:ef:3d:96:4a:3f:28:f0:35:b8: 3d:5d:21:6a:8c:1f:68:d1:8d:04:fe:80:f6:b3:cc: fc:c5:12:2e:a7:15:6b:39:b0:97:ff:50:70:b0:0e: 0e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EF:AD:F3:78:9D:33:5E:82:07:51:A4:46:30:DE:A6:6D:25:BD:9C X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663530303a3a2f34302d3430203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:f500::/40 Signature Algorithm: sha256WithRSAEncryption 23:d4:5c:23:8b:5b:1f:dc:77:4e:66:18:87:d2:c8:ec:e6:95: 1c:6a:5e:4f:46:fd:e3:84:17:02:e9:2d:1b:aa:83:59:ca:df: 0c:f1:4c:fa:91:fa:72:86:21:ea:30:74:25:9d:23:36:84:f8: 71:ca:17:7c:25:b1:5c:d2:6b:47:21:33:8f:5d:ad:fb:50:f0: 23:cb:6b:87:85:f6:55:ca:db:1f:82:55:00:cf:ba:5d:57:bc: 03:c1:02:e6:8c:bf:ed:1e:80:37:2e:86:d5:8a:2c:7c:af:36: 55:c7:31:3f:ea:24:4e:85:a8:19:f9:03:1e:f1:c8:79:28:51: 3d:cd:a1:2c:ca:6a:70:f3:3c:f5:32:b7:7d:0d:85:fc:60:b9: c7:ce:1f:e9:28:7d:d5:15:20:5c:bd:48:50:3c:d9:c2:b6:a8: f3:b7:6c:0e:bb:97:82:30:4f:18:f6:6d:f7:5f:a6:99:bf:e1: a6:02:08:19:28:ee:0f:7b:26:f3:a4:a4:ba:0e:d4:03:53:ee: 26:df:7f:bc:af:b5:eb:e3:20:5b:3a:cb:6c:a6:d5:10:b9:c6: 73:5f:10:08:5d:53:a5:48:f7:cc:41:4b:1a:df:f8:56:84:b6: 1d:47:07:4c:ec:7d:0a:95:4a:c6:67:b3:c8:d8:5a:cf:4a:75: 00:d6:76:1c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIULfovrgilkD751yBukxmm3hk2dnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTMyMDNaFw0yNzAzMDExNTM3MDNaMDMxMTAvBgNV BAMTKDBFRUZBREYzNzg5RDMzNUU4MjA3NTFBNDQ2MzBERUE2NkQyNUJEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89kxxv6Lpz93PyrQbAx9NSaPx PJnSSoOwI9wo2jkLvQVSAWWxd9sLHCDNHUOk+boZwPVvY/hPTgWvYutXiELD54Vo NTaDRBzUlSafZh2bVuGFyXJzke1+YFPColEE59geW9QxwFeIZcEUQ4cAJKGyT+J0 WpB1eS+DS2GWFaCUkw1inVXGuXvbfcMRk2zCz9N7tRxwkc6YAemHEmmp5bgAFmne bCVEo5xt+XI2W9u8w56My0aGH/Yil0v4nP/bfuNzzSJ43AS9hMoHkgyS9H8fQlwb 6rprIO89lko/KPA1uD1dIWqMH2jRjQT+gPazzPzFEi6nFWs5sJf/UHCwDg5xAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUDu+t83idM16CB1GkRjDepm0lvZwwHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2E2NjM1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEIsD1MA0GCSqGSIb3DQEBCwUA A4IBAQAj1Fwji1sf3HdOZhiH0sjs5pUcal5PRv3jhBcC6S0bqoNZyt8M8Uz6kfpy hiHqMHQlnSM2hPhxyhd8JbFc0mtHITOPXa37UPAjy2uHhfZVytsfglUAz7pdV7wD wQLmjL/tHoA3LobViix8rzZVxzE/6iROhagZ+QMe8ch5KFE9zaEsympw8zz1Mrd9 DYX8YLnHzh/pKH3VFSBcvUhQPNnCtqjzt2wOu5eCME8Y9m33X6aZv+GmAggZKO4P eybzpKS6DtQDU+4m33+8r7Xr4yBbOstsptUQucZzXxAIXVOlSPfMQUsa3/hWhLYd RwdM7H0KlUrGZ7PI2FrPSnUA1nYc -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:21 2026 by rpki-client